Overview
overview
3Static
static
1peppy.rar
windows10-ltsc_2021-x64
1peppy/peppy.sln
windows10-ltsc_2021-x64
3peppy/peppy/core.cxx
windows10-ltsc_2021-x64
3peppy/pepp...ac.hxx
windows10-ltsc_2021-x64
3peppy/pepp...id.hxx
windows10-ltsc_2021-x64
3peppy/pepp...sk.hxx
windows10-ltsc_2021-x64
3peppy/pepp...ry.hxx
windows10-ltsc_2021-x64
3peppy/pepp...es.hxx
windows10-ltsc_2021-x64
3peppy/pepp...ed.hxx
windows10-ltsc_2021-x64
3peppy/peppy/peppy.xml
windows10-ltsc_2021-x64
3peppy/pepp...oj.xml
windows10-ltsc_2021-x64
3peppy/pepp...j.user
windows10-ltsc_2021-x64
3Analysis
- user interaction
yes - max time kernel
898s - max time network
546s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
27/07/2026, 01:16
Static task
static1
Behavioral task
behavioral1
Sample
peppy.rar
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
peppy/peppy.sln
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
peppy/peppy/core.cxx
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral4
Sample
peppy/peppy/core/reg/mac.hxx
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral5
Sample
peppy/peppy/core/reg/uninstallid.hxx
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
peppy/peppy/core/wmi/disk.hxx
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral7
Sample
peppy/peppy/impl/defs/registry.hxx
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral8
Sample
peppy/peppy/impl/includes.hxx
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral9
Sample
peppy/peppy/impl/seed/seed.hxx
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral10
Sample
peppy/peppy/peppy.xml
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral11
Sample
peppy/peppy/peppy.vcxproj.xml
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral12
Sample
peppy/peppy/peppy.vcxproj.user
Resource
win10ltsc2021-20260513-en
General
- Target peppy.rar
- Size 11KB
- Sample260727-bm78hstyey
- SHA256 6576ce9f403e2f8455bc7f4041686797291ade8a3a7f5018295824ecb05b36b7
- MD5 51adda1f494d9aba687931007aa5b812
- SHA1 12df0256e0fc6730cd30b03452da5f484008bddb
- SHA512 b2def82c07601683d08a2c7d2f82d81b4dfe665d9ae659c6aa304102ec4ff25cdf06a164c070fcff34cd5c2e7c17ed837b3f0d040347241ef859ec61ad2fcd06
- SSDEEP 192:bEZTQOYCA+Zr/am1qw9rEQ9YAkC1oaQNe+RuqQLbxunsWnPMw1QAR:bArPA+hymJRvkC1h41UqCK9EwLR
- TLSH T1EB42BFD0936AC50BB4391442A43A16AFFC6F3562EC5BC6068EC3CAD3F75B14A07542B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000_Classes\Local Settings 7zFM.exe Key created \REGISTRY\USER\S-1-5-21-1741132852-2793423776-1557670484-1000_Classes\Local Settings OpenWith.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2264 7zFM.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 2264 7zFM.exe Token: 35 2264 7zFM.exe Token: SeSecurityPrivilege 2264 7zFM.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2264 7zFM.exe 2264 7zFM.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4208 OpenWith.exe 4208 OpenWith.exe 4208 OpenWith.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\peppy.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2264
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4208
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\7zO8D8C3A88\uninstallid.hxx
- Size 2KB
- SHA256 329b03ce6e3cf35c701075f7005be65b3f1b60bce1c85da2000a56848dc79137
- MD5 076c52207cdc37c9ee5839623666eef4
- SHA1 5af3e4128d8a57f7770c0e698b516f981d5125b0
- SHA512 ea9d290c1f3a8694a95fbb4a883bd7cabbf8466c21baf4eb0327bd5453f645ae3607a813b62ada76074c8f848ad386c6325ed67b01810cf1860c8955401b5758
- TLSH T1BB51658770EF28285622E3B54B96613234152663361A7DBCB84D24F0CFB451C9732BED
- MD5 SHA1 SHA512 TLSH